Security you can inspect.
Where your data lives and how it moves.
- Encryption in transit
TLS 1.2 or higher on every connection.
Done - Encryption at rest
Managed keys, rotated on a schedule.
Done - Project isolation
Each project has its own storage scope and agents see only its data.
Done - No training on your data
Your data never trains shared models.
Done - EU data residency
Storage and processing inside the EU.
In progress - Deletion on request
Project data removed within a defined window.
In progress
In transit through TLS · at rest under managed keys · inside its project
Who can do what, and a record of it.
- Access by request only
No self sign-up. Every account is reviewed.
Done - Role-based access
Owner, editor and viewer roles per project.
Done - Multi-factor authentication
Required for every account.
In progress - Single sign-on (SAML)
For institutes and hospitals with an identity provider.
In progress - Audit log
Every agent action and data access is recorded.
In progress
Owner, editor and viewer · set per project
Where we stand.
GDPR
WelloWork AB acts as processor for project data. Data processing agreement on request.
DoneISO 27001
Information security management system.
In progressSOC 2 Type II
Independent audit of controls.
PlannedSub-processors
A public list of cloud and model providers.
In progressCytogent is a research tool. It is not a medical device and makes no clinical decisions. Agents draft, search, predict and support; a qualified person reviews and decides.
Common questions.
Is my data used to train models?
No. Data you bring to Cytogent stays inside your project and never trains shared models. Projects are isolated from each other and access is granted per role.
Where is data hosted?
Cytogent is built and operated from Sweden by WelloWork AB. EU data residency, meaning storage and processing inside the EU, is in progress rather than finished. This page shows its current status.
Can I get a data processing agreement?
Yes. WelloWork AB acts as processor for project data under the GDPR, and a data processing agreement is available on request. Ask for it in your access request or on the first call.
Ask us anything.
A data processing agreement is available on request. Tell us what your team needs.
Request access